Privacy Policy

This Privacy Policy describes how DeepSignal (“DeepSignal”, “we”, “our”) collects, uses, and shares information when you visit ai-deep-signal.com and use the services available on the site (the “Service”).

DeepSignal is the data controller for personal data processed through the Service. The Service is a global, free-to-read AI news reader; we do not currently sell, rent, or trade personal information to third parties.

1. Information we collect

1.1 Information you give us

• Account information — when you sign in with GitHub, Google, or a magic-link email, we receive your email address, your authentication provider's account identifier, and (if your provider returns them) your display name and avatar URL.
• Subscription information — if you subscribe to the Daily Brief, we store your delivery channel (email, Slack webhook, Feishu webhook, etc.), the destination address, your timezone, and your preferred delivery hour.
• Reading preferences — articles you save, like, dislike, or share; sources you mute; locale and theme choices.
• Feedback — anything you submit through the feedback form or contact email, including the email address you attach to it.

1.2 Information collected automatically

• Server logs — your IP address, user-agent string, referrer, the URL path you requested, and the response time, kept for up to 30 days for security and reliability purposes.
• Cookies — see Section 4 below.
• Analytics events — anonymous page-view and performance metrics collected via Vercel Analytics, Vercel Speed Insights, and Google Analytics 4. These metrics are not joined to your DeepSignal account.

2. How we use information

We use the information described above to (a) operate the Service — sign you in, remember your preferences, deliver your Daily Brief, and store your saved articles; (b) communicate with you when you contact us; (c) keep the Service secure — detect abuse, rate-limit bad actors, debug errors; and (d) improve the product based on aggregate analytics. We do not use your personal data to train AI models.

3. Third-party services

DeepSignal is built on top of a small set of third-party platforms. Each handles a specific category of data:

• Vercel — hosting, edge runtime, and Vercel Analytics / Speed Insights for anonymous traffic and performance metrics.
• Google — Google Analytics 4 for aggregate audience and engagement measurement.
• Supabase — managed Postgres database, OAuth / magic-link authentication, and file storage. All account data and reading preferences live here.
• OpenAI — generates article summaries and the Daily Brief. We send the original article text (already public) and the prompt template. We do not send your account information to OpenAI.
• Resend — delivers outbound email (Daily Brief, feedback replies, magic-link sign-in).
• Slack / Feishu / WhatsApp / Telegram — only when you explicitly add one of these channels as a subscription delivery target.

Each provider has its own privacy policy. We do not share your data with any party outside of these processors.

4. Cookies

DeepSignal uses a small number of cookies:

• Authentication cookies (essential) — set by Supabase Auth to keep you signed in.
• Preference cookies (essential) — store your language (ainh_locale), theme, browser timezone, and dismissal state of in-product banners.
• Analytics cookies or identifiers — Vercel provides aggregate analytics without cross-site advertising profiles. Google Analytics 4 may use cookies or device identifiers, subject to the available consent controls and your browser settings.

Where consent is legally required, non-essential analytics storage is subject to the available consent controls. You can also clear cookies from your browser at any time; doing so will sign you out and reset preferences.

5. Advertising

DeepSignal does not currently serve advertising. We will update this policy before enabling any advertising partner.

6. Data retention

We retain account and subscription data for as long as the account is active. If you delete your account, we delete or anonymise your personal data within 30 days, except for what we're required to keep for legal reasons (e.g. audit logs for security incidents). Server logs are kept for up to 30 days. Anonymous analytics aggregates may be retained indefinitely.

7. Your rights

You have the right to access, export, correct, or delete your personal data; to object to or restrict certain processing; and to withdraw any consent you previously gave. To exercise any of these rights, email contact@ai-deep-signal.com from the address associated with your account.

If you are in the European Economic Area, the United Kingdom, or Switzerland, the General Data Protection Regulation (GDPR) gives you these rights directly. If you are a California resident, the California Consumer Privacy Act (CCPA) gives you equivalent rights, including the right to know what categories of personal information we collect and the right to request deletion. We honour both regimes.

8. Children

DeepSignal is not directed at children under 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, email contact@ai-deep-signal.com and we will delete it.

9. International transfers

Our hosting (Vercel) and database (Supabase) operate primarily out of the United States and the European Union. By using the Service you understand your data may be processed in jurisdictions other than your own.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the “effective date” at the top of the page and, for material changes, post a notice on the site for at least 14 days. Continued use of the Service after a change indicates acceptance.

11. Contact

For any privacy-related question or to exercise your rights, email contact@ai-deep-signal.com or use the Contact page.